Systematic and independent verification of the Information Security Management System according to ISO/IEC 27001. Includes compliance checks against regulatory requirements, effectiveness of implemented controls, risk management, non-conformity handling, management review, and continuous improvement of the ISMS through internal and certification audits.